Software to detect network downloads

[bdsams Veteran]

Hey Neowin,

Does anyone know of software that will allow an network admin detect or stop mass downloads of data internally?

The situation is this, a medium size client uses shared network drive for storing documents, collaboration etc. While the network is secure, if an employee goes rogue they could download the entire contents of all the shared drives and then leave the company with valuable information.

While we know we cant stop certain things from occurring, it's a scenario that unless you have all the right pieces, the data doesn't make sense and no single individual needs all the data at the same time.

Yes we are aware of setting up permissions etc, but this is a worst case scenario that we are trying to avoid or at least know of an occurence.

Essentially, if someone where to do it, we don't need to stop them, just know that they did it in case they leave the company the next day for legal reasons.

Thoughts?

[k22]

Essentially, if someone were to do it, we don't need to stop them, just know that they did it in case they leave the company the next day for legal reasons.

Just guessing as I don't do Windows admin work, but maybe take a look at these articles on auditing? I would assume that you could push this to all of the client computers using Group Policy...

http://support.microsoft.com/kb/310399

http://support.microsoft.com/kb/814595

[Teebor]

Prevent access to USB drives and CD Writing?

The if they try to upload it block file sharing sites with your proxy software and monitor for large amounts of internet traffic for that user. Also keep the log files of the proxy server

[MS Bob 11]

Maybe something like this will help to get a notification for which computer and username is accessing the share: NetShareMonitor. But it's ugly as hell and has an annoying sound and ugly tray icons. You can "Resource Hacker-ify" it to beauty it - remove the ugly graphics, replace it with a decent sound and add a manifest so its gets the Aero themed look.